379 matches found
ADODB 4.6/4.7 - 'Tmssql.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18638/info ADOdb is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of...
FreeBSD : cacti -- ADOdb 'server.php' Insecure Test Script Security Issue (79c1154d-d5a5-11da-8098-00123ffe8333)
Secunia reports : Cacti have a security issue, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system. The problem is caused due to the presence of the insecure 'server.php' test script. %NASLMINLEVEL 70300 C Tenable Network Securit...
FreeBSD : lifetype -- ADOdb 'server.php' Insecure Test Script Security Issue (116b0820-d59c-11da-8098-00123ffe8333)
Secunia reports : A security issue has been discovered in LifeType, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system. The problem is caused due to the presence of the insecure 'server.php' test script. %NASLMINLEVEL 70300 C...
Design/Logic Flaw
AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for 1 adodb-access.inc.php, 2 adodb-ado.inc.php, 3 adodb-adoaccess.inc, 4 adodb-adomssql.inc.php, 5 adodb-borlandibase, 6 adodb-csv.inc.php, 7 adodb-db2.inc.php, 8 adodb-fbsql.inc.php, 9...
CVE-2006-2329
AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for 1 adodb-access.inc.php, 2 adodb-ado.inc.php, 3 adodb-adoaccess.inc, 4 adodb-adomssql.inc.php, 5 adodb-borlandibase, 6 adodb-csv.inc.php, 7 adodb-db2.inc.php, 8 adodb-fbsql.inc.php, 9...
RIblog Remote SQL Injection Exploit
------------------------------------------------------------------ - RIblog Remote SQL Injection Exploit - -= http://colander.altervista.org/advisory/riblog.txt =- ------------------------------------------------------------------ -= RIblog =- Omnipresent April 21, 2006 Vunerabilitys:...
lifetype -- ADOdb "server.php" Insecure Test Script Security Issue
Secunia reports: A security issue has been discovered in LifeType, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system. The problem is caused due to the presence of the insecure "server.php" test script...
GLSA-200604-07 : Cacti: Multiple vulnerabilities in included ADOdb
The remote host is affected by the vulnerability described in GLSA-200604-07 Cacti: Multiple vulnerabilities in included ADOdb Several vulnerabilities have been identified in the copy of ADOdb included in Cacti. Andreas Sandblad discovered a dynamic code evaluation vulnerability CVE-2006-0147 and...
PhpOpenChat3.0.xADODB.txt
!/usr/bin/php -q -d shortopentag=on ? echo "PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: Welcome to your PHPOpenChat-Installation!\r\n\r\n"; if $argc4 echo "Usage: php...
Cacti: Multiple vulnerabilities in included ADOdb
Background Cacti is a complete web-based frontend to rrdtool. ADOdb is a PHP-based database abstraction layer which is included in Cacti. Description Several vulnerabilities have been identified in the copy of ADOdb included in Cacti. Andreas Sandblad discovered a dynamic code evaluation...
[SA19563] MAXdev MD-Pro ADOdb "server.php" Insecure Test Script Security Issue
TITLE: MAXdev MD-Pro ADOdb "server.php" Insecure Test Script Security Issue SECUNIA ADVISORY ID: SA19563 VERIFY ADVISORY: http://secunia.com/advisories/19563/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x...
[SECURITY] [DSA 1029-1] New libphp-adodb packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1029-1 [email protected] http://www.debian.org/security/ Martin Schulze April 8th, 2006 http://www.debian.org/security/faq -...
ADODB 4.70 - tmssql.php Denial of Service
ADODB 4.70 - tmssql.php Denial of Service !/usr/bin/php -q -d shortopentag=on 126 $result...
ADODB < 4.70 (PhpOpenChat 3.0.x) Server.php SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: Welcome to your PHPOpenChat-Installation!\r\n\r\n";...
ADODB < 4.70 (PhpOpenChat 3.0.x) Server.php SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= ADODB 4.70 PhpOpenChat 3.0.x Server.php SQL Injection Exploit ================================================================= !/usr/bin/php -q -d shortopentag=on ? echo...
ADODB < 4.70 (tmssql.php) Denial of Service Vulnerability
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "ADODB tmssql.php Denial of service\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path redo OPTIONS\r\n"; echo "host: target...
ADODB < 4.70 (tmssql.php) Denial of Service Vulnerability
Exploit for unknown platform in category web applications ========================================================= ADODB 4.70 tmssql.php Denial of Service Vulnerability ========================================================= !/usr/bin/php -q -d shortopentag=on ? echo "ADODB tmssql.php Denial o...
ADODB < 4.70 (PHPOpenChat 3.0.x) - 'Server.php' SQL Injection
!/usr/bin/php -q -d shortopentag=on ? echo "PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: Welcome to your PHPOpenChat-Installation!\r\n\r\n"; if $argc4 echo "Usage: php...
ADODB < 4.70 - 'tmssql.php' Denial of Service
!/usr/bin/php -q -d shortopentag=on 126 $result.=...
[SECURITY] [DSA 1031-1] New cacti packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1031-1 [email protected] http://www.debian.org/security/ Martin Schulze April 8th, 2006 http://www.debian.org/security/faq -...